Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=ibudget.lk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 17, 2026
Valid Until
September 15, 2026
34 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
80:43:8B:BA:C1:DE:F1:94:8F:3F:80:E5:BF:69:74:DC:AC:5C:EE:D3:E5:29:EF:FE:52:DB:DE:BB:9D:C4:91:1B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
scag.site
ajmokh.com
www.ajmokh.com
alvexiacommerce.com
amirassyrianfood.com
andmik.ee
www.aratrumx.com
www.baulmagicodisfraces.com
app.buscarrastreamento.com.br
careernomad.org
www.careernomad.org
auth.cguards.net
www.connectmindsmarketing.com.br
doutorarobertamelo.com.br
www.doutorarobertamelo.com.br
auth.education-tsi.fr
egyresztmasreszt.hu
encuesta.europanameca.com
auth.ezlearn.live
www.fendeg.nl
flowgest.com.br
freshchickenexpress.store
fscr.one
go-cosmos.ai
shopy.godundun.com
gowild.co.in
www.gowild.co.in
graphandnode.com
gustavobranda.co
app.gyeoljun.com
helpsnackz100elite.org
www.helpsnackz100elite.org
auth.hylemi.com
app.ibudget.lk
ibudget.lk
jakeveazey.com
www.jakeveazey.com
plunder.jalapenolabs.io
kindex.hk
webapp.klabby.app
kvisualz.com
explore.leeds.ac.uk
levafy.com
lifeinenglish.com.br
lulu-bahrain.com
lulu-kuwait.com
lulu-saudi.com
luluqatar.com
www.magnaxin.com
mr-ahmed.medicodes.online
www.mr-ahmed.medicodes.online
menedzerosk.pl
app.mine-papirer.no
filament-viewer.mujido.com
mutualmotors.org
mutualmotorscollective.com
my-guide.co.za
dev.myprism.co.za
negimate.jp
crm.netresource.org
newendata.com
omarcarpinteyro.com
www.omarcarpinteyro.com
ustredna.wflow.padua.cz
pedidos.pegueleve.com
qrpreferido.pt
quadroverso.com.br
docx-digital.quadrsoft.com
ramduit.com
rideouts.app
secondandgoal.com
www.secondandgoal.com
led-neon-signboard.shrestham.com.np
marriage-point-calculator.shrestham.com.np
siracusanofamilyoffice.com
beta.skysentry.us
soscarclean.fr
www.soscarclean.fr
www.southairporttransfers.co.uk
ar.spacetalk.co.kr
www.tallahprod.com
tesahealth.com
www.tfhresources.org
theharperfam.com
thesignaturepodcast.com
userverification.thinkdigital.co.za
tiendapolen.com
turemesa.lat
www.turemesa.lat
veteranenergyltd.com
www.veteranenergyltd.com
cashier.vinicafe.com
dev.voleybul.com
voleybul.com
www.voleybul.com
www.waterqoswimmingpools.com
welcometothefuture.ba
dev.worldcupunplugged.com
www.yuehe.buzz
nap.zlearn.vn
Other domains in certificate